Senior PKI , HSM and Code Signing Consultant

Encryption Consulting LLC has an opening for a Senior PKI , HSM and Code Signing Engineer role within the Security Encryption Team! The Senior PKI , HSM and Code Signing Engineer will need to be a highly motivated self-starter with excellent problem-solving skills, flexibility, good judgment, and the ability to coordinate multiple, concurrent tasks in an effective manner. In this role, the Senior PKI , HSM and Code Signing Engineer will take care of day to day operations involving encryption tasks, engineering of the encryption tools, design and implement encryption processes, in collaboration with technology peers to enhance the certificate posture of Encryption Consulting LLC Customers. You Also Have

• Experience with Certificate and Key lifecycle management
• Experience with PKI (Microsoft PKI preferred)
• Experience with HSM (nCipher and Luna preferred)
• Experience with Code Signing
• Experience with Entrust Certificate Services (or any other Public CA)
• Experience with Venafi Trust Protection Platform (or any other Certificate Lifecycle Management tool)
• Experience with Safenet Key Secure
• Experience with Azure Key Vault or AWS Certificate manager
• Experience with PGP Encryption
• Good understanding of X.509 certificates, RSA Keys, TLS and other Encryption protocols As An Security Encryption Engineer
• You will act as a key figure for the creation, renewal, reissue and revocation of public and private certificates
• You will collaborate with internal teams to automate the installation of certificates
• You will function as the Subject Matter Expert for the Encryption Consulting LLC Security Encryption program
• You will monitor the health check of PKI components
• You will analyze, install and configure PKI tools
• You will create and update technical documents, SOPs and Architecture/Data Flow diagrams
• You will develop comprehensive reports and presentations
• You will participate in key operational meetings and take notes to present to stakeholders
• You will participate in operational on-calls as needed, to support multiple 24/7 geo-distributed environments
• You should be flexible to work in US first shift